https://lamport.azurewebsites.net/tla/formal-methods-amazon.pdf https://lamport.azurewebsites.net/tla/formal-methods-amazon.... mentions bugs found across S3,EB

https://lamport.azurewebsites.net/tla/formal-methods-amazon.pdf https://lamport.azurewebsites.net/tla/formal-methods-amazon.... mentions bugs found across S3,EBS,DynamoDB. A few other references: - https://gist.github.com/MattPD/71b63a3e1600c2b52e1db80fa2834e60 https://gist.github.com/MattPD/71b63a3e1600c2b52e1db80fa2834... (Formal Methods and Program Analysis in Industry, has lots of links on other industry usage) - https://d1.awsstatic.com/Security/pdfs/One_Click_Formal_Methods.pdf https://d1.awsstatic.com/Security/pdfs/One_Click_Formal_Meth... - https://d1.awsstatic.com/Security/pdfs/Continuous_Formal_Verification_Of_Amazon_s2n.pdf https://d1.awsstatic.com/Security/pdfs/Continuous_Formal_Ver... (Coq, not TLA+) - https://aws.amazon.com/security/provable-security/ https://aws.amazon.com/security/provable-security/